Dave
2594dead84
Add PocketBase login, first-sign-in password changes, account settings, and user activation, reactivation and deletion with self-removal guards. Protect application pages and APIs and keep private pages out of PWA caches. Resolve plant locations from site assignments and improve map controls, profit chart views, navigation and mobile table layouts. Validation: production build and TypeScript passed; 28 unit tests passed. Backend access integration tests and mobile verification are documented.
30 lines
1.6 KiB
TypeScript
30 lines
1.6 KiB
TypeScript
import { NextRequest, NextResponse } from "next/server";
|
|
import { sessionFromToken } from "@/lib/auth-service";
|
|
import { SESSION_COOKIE, authDestination } from "@/lib/auth-policy";
|
|
|
|
export async function proxy(request: NextRequest) {
|
|
const path = request.nextUrl.pathname;
|
|
if (path === "/api/health" || path === "/api/auth/logout" || path === "/login") return NextResponse.next();
|
|
let session;
|
|
try {
|
|
session = await sessionFromToken(request.cookies.get(SESSION_COOKIE)?.value || "");
|
|
} catch {
|
|
return path.startsWith("/api/")
|
|
? NextResponse.json({ error: "Account service is temporarily unavailable." }, { status: 503 })
|
|
: new NextResponse("Account service is temporarily unavailable. Please reload to try again.", { status: 503, headers: { "Content-Type": "text/plain; charset=utf-8", "Cache-Control": "no-store" } });
|
|
}
|
|
const destination = authDestination(session);
|
|
// Logout is a server action and remains available during first-login onboarding.
|
|
if (path === "/change-password" && session) return NextResponse.next();
|
|
if (destination !== "/") {
|
|
if (path.startsWith("/api/")) return NextResponse.json({ error: session ? "Change your starter password first." : "Please sign in." }, { status: session ? 403 : 401 });
|
|
return NextResponse.redirect(new URL(destination, request.url));
|
|
}
|
|
const response = NextResponse.next();
|
|
response.headers.set("Cache-Control", "private, no-store");
|
|
return response;
|
|
}
|
|
|
|
export const config = {
|
|
matcher: ["/((?!_next/static|_next/image|brand/|icons/|favicon\\.ico|manifest\\.json|sw\\.js|workbox-[^/]+\\.js|swe-worker-[^/]+\\.js|worker-[^/]+\\.js).*)"],
|
|
};
|